---
id: 9275
title: "CVE-2023-36934 Analysis: MOVEit Transfer SQL Injection"
cve: CVE-2023-36934
source_domain: projectdiscovery.io
source_url: "https://projectdiscovery.io/blog/moveit-transfer-sql-injection"
published_at: "2023-07-09T09:46:54Z"
tags: ["bug-bounty"]
phying_url: "https://phying.com/item/9275"
lang: en
---

# CVE-2023-36934 Analysis: MOVEit Transfer SQL Injection

## Summary

Introduction At ProjectDiscovery, our focus is on enhancing our open-source solution, Nuclei, by incorporating templates for trending CVEs. Our collaborative efforts involve constant additions of templates by the open-source community, internal template and research team to stay updated on emerging exploits. One such notable case involves MOVEit Transfer, a widely utilized web application, which recently came under scrutiny due to a series of SQL injection (SQLi) vulnerabilities. These vulnera

## Intelligence Metadata

- **Sources:** projectdiscovery.io
- **CVE:** CVE-2023-36934
- **Published:** 2023-07-09T09:46:54Z
- **Original:** https://projectdiscovery.io/blog/moveit-transfer-sql-injection
- **Phying News:** https://phying.com/item/9275